Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-12490

Опубликовано: 25 июн. 2026
Источник: ubuntu
Приоритет: medium
CVSS3: 7.5

Описание

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

not-affected

esm-apps/bionic

not-affected

esm-apps/focal

not-affected

esm-apps/jammy

not-affected

esm-apps/noble

not-affected

esm-apps/resolute

released

4.14.0-1ubuntu0.1~esm1
jammy

not-affected

noble

not-affected

questing

not-affected

Показывать по

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
около 1 месяца назад

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.

CVSS3: 7.5
nvd
около 1 месяца назад

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.

CVSS3: 7.5
debian
около 1 месяца назад

When a provide-xfr is given with a tls-auth-name, a secondary requesti ...

CVSS3: 7.5
github
около 1 месяца назад

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.

7.5 High

CVSS3